CVE-2026-86137
published 2026-09-05CVE-2026-86137: In libxml2 before 2.15.4, xmlFAParsePosCharGroup has an out-of-bounds read, aka an out-of-bounds read in the NXT macro in xmlregexp.
PriorityP49low2.9CVSS 3.1
AVLACHPRNUINSUCNINAL
EPSS
0.12%
1.8th percentile
In libxml2 before 2.15.4, xmlFAParsePosCharGroup has an out-of-bounds read, aka an out-of-bounds read in the NXT macro in xmlregexp.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| xmlsoft | libxml2 | < 2.15.4 | 2.15.4 |
| xmlsoft | libxml2 | — | — |
CVSS provenance
nvdv3.12.9LOWCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
vendor_redhat2.9LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
libxml2: libxml2: Denial of Service via out-of-bounds read in xmlFAParsePosCharGroup
vendor_redhat·2026-09-05·CVSS 2.9
CVE-2026-86137 [LOW] CWE-125 libxml2: libxml2: Denial of Service via out-of-bounds read in xmlFAParsePosCharGroup
libxml2: libxml2: Denial of Service via out-of-bounds read in xmlFAParsePosCharGroup
A flaw was found in libxml2. This out-of-bounds read vulnerability, specifically within the `xmlFAParsePosCharGroup` function, could allow an attacker to cause a denial of service. By processing specially crafted XML input, the affected component may attempt to read data beyond its allocated memory buffer, leading to application instability or crashes.
Package: libxml2 (Red Hat Hardened Images) - Affected
Package: swift-lang (Red Hat Hardened Images) - Affected
GHSA
In libxml2 before 2.15.4, xmlFAParsePosCharGroup has an out-of-bounds read, aka an out-of-bounds read in the NXT macro in xmlregexp.
ghsa_unreviewed·2026-09-05
CVE-2026-86137 [LOW] CWE-125 In libxml2 before 2.15.4, xmlFAParsePosCharGroup has an out-of-bounds read, aka an out-of-bounds read in the NXT macro in xmlregexp.
In libxml2 before 2.15.4, xmlFAParsePosCharGroup has an out-of-bounds read, aka an out-of-bounds read in the NXT macro in xmlregexp.
VulDB
xmlsoft libxml2 up to 2.15.3 NXT macro xmlFAParsePosCharGroup out-of-bounds (Nessus ID 343099)
vuldb·2026-09-05·CVSS 2.9
CVE-2026-86137 [LOW] xmlsoft libxml2 up to 2.15.3 NXT macro xmlFAParsePosCharGroup out-of-bounds (Nessus ID 343099)
A vulnerability marked as critical has been reported in xmlsoft libxml2 up to 2.15.3. The affected element is the function xmlFAParsePosCharGroup of the component NXT macro. Performing a manipulation results in out-of-bounds read.
This vulnerability is reported as CVE-2026-86137. The attack is possible to be carried out remotely. No exploit exists.
It is suggested to upgrade the affected component.
No detection rules found.
No public exploits indexed.
2026-09-05
Published